Lucene search

K
veracodeVeracode Vulnerability DatabaseVERACODE:47234
HistoryMay 29, 2024 - 6:39 a.m.

Code Injection

2024-05-2906:39:59
Veracode Vulnerability Database
sca.analysiscenter.veracode.com
1
code injection
silverstripe/framework
associative arrays
renderwith
unsanitized input

7.2 High

AI Score

Confidence

Low

silverstripe/framework is vulnerable to Code Injection. The vulnerability is due to the improper handling of associative arrays in the second argument of renderWith, where unsanitized user input can be passed directly as a value.

7.2 High

AI Score

Confidence

Low